How about add a systemd service like certbot?
A modified version from certbot package:
/lib/systemd/system/letsencrypt.sh.service
[Unit]
Description=letsencrypt.sh
Documentation=file:///usr/share/doc/letsencrypt.sh/README.Debian
[Service]
Type=oneshot
ExecStart=/usr/bin/letsencrypt.sh -c
Package: letsencrypt.sh
Version: 0.1.0-2
Severity: wishlist
I continue the discussion from Bug#822493 here:
Please provide a cron based automatism for refreshing certificates.
It would be nice that users only need to provide the hostname(s) they
want to get a certificate for in